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Joe Bloggs 
67.227.117.77 



56k Dial-up- 
Connection 




The Internet! 



Intermediary server 
.on the Internet (www.gkn.net) / 
65.225.115.65 



The orang.com main office 
Private Network 
(1.251.174.0) 



:::^= 



mail server 
(mail.orang.com) 
1.251.174.155 



1.251.174.0 



Dedicated T1 
Connection 




Restrictive Firewal 
1.251.174.1, 64.224 



(out only) 
.114.64 



network router 
1.251.174.158 



II 

proxy client 
1.251.174.156 




web server 
(www.orang.com) 
1.251.174.157 




Proxy Client 



Send a request for 
service to a virtual 
address on the 
Intermediary 



Receive Response 



Register Virtual 
Address (VA) 



Warn Administrator 
of Connection Error 



Server 



Keep Open Proxy 
Client Connection and 
wait for client requests 



Interpret Request to 
identify Correct Proxy 
Client Connection 



Transform the 
Request VA to a 
Real Application 
Address^Request 



Send Request to 
waiting Open Proxy 
Client Connection 



Receive Server 
Response 



Receive Client 
Request 



Open a Client 
Connection to the 
Server and Send 
through the Request 



Receive Request, 
Interpret, Action and 
Send back the 
Response 



J 



Translate any Real 
Application Addresses 
into Virtual Addresses 



Break Connection 
with Intermediary 



Return Response to 
Client 



Receive Response 

and Return to 
intermediary through 
Open Connection 



Break Connection 
with Proxy Client 



Start a nev\r 
Proxy Client 
[ Connection and) 
Registration 
Process 
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Client[c] 
Server[s] 



Modified Router 
Modified Router 



Intermediary 



Send a network 
datagram destined 
for the opposite 
network (routed via 
the Modified 
Router) 




Datagram 
Routed to 
Modified Router 
at the Link Layer 



Receive datagram, 
interpret, action and 

reply with a 
datagram destined 
for the Opposite 
Network 



Add a Virtual Address 

Header and 
authentication data for 
the opposite network 




Proxy Client 
Proxy Client 




Register Virtual 
Address (VA) 



Warn 
Administrator of 
Connection Error 



Keep Open Proxy 
Connection and 
wait for client 
requests 



-t 



Interpret Request 
Header to identify 
Correct Proxy Client 
Connection 



Drop Modified Router 
Header and wait for 
encapsulated datagram 



Send encapsulated 
datagram to Opposite 
Newtork through Open 
Proxy Client Connection 



Datagram Repeated on 
Opposite Network 



Receive network 
datagram 



Repeat the datagram 
through the physical 
link layer 



Break Connection to 
Intermediary and Start a 
Fresh Registration 
Process 




